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Amendments to the Specification: 

Page 1 , line 2, please amend the paragraph as follows: 

The present invention is related to application USSN 10/080,639 , entitled 

"Delivery Of A Secure Software License For a Software Product And A Toolset For 
Creating The Software Product" filed on February 21, 2002 , and assigned to the 
assignee of the present invention. 

Page 7 line 21 , please amend the paragraph as follows: 

In accordance with a preferred embodiment, a publisher certificate and a product 
certificate are associated with the software product 215 to be authorized, where both 
the publisher certificate and the product certificate include respective private/public kev 
pairs, and where at least one of the product certificate private and public kevs is diaitallv 
signed by the publisher private key associated with the publisher certificate. In a further 
embodiment, the publisher certificate is digitally signed by a certificate authority. 

Referring now to FIG. 3, a flow diagram for the process of delivering secure 
license information to a software product 215 is shown. The process begins with step 
300, where the authorization program 214 checks to see if a valid license exists. If one 
does exist, the process continues with step 305. If no license is found, the authorizing 
program 214 generates a license request in step 301 . This process is described below 
in detail in association with FIG. 6. This license request in the preferred embodiment is 
in the form of a signed XML document, and will be described in detail below in 
association with FIG. 7. 

Page 8 line 6, please amend the paragraph as follows: 
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In a preferred embodiment, the license request in the form of an XML document 
is signed using the product private key. An alternate embodiment is to encrypt the 
license request using a product public key, rather than signing the license. In this case, 
the product private key is not included within the authorizing program 214, since the 
trust relationship described below established by the use of certificates is not in effect. 
In this embodiment, security is established by maintaining the privacy of the private 
keys. 



